Threats tagged 'ghsa-q7qh-wq2f-chrc'

CVE-2026-108060 is a stored Cross-Site Scripting (XSS) vulnerability in the Alosuite software affecting the delivery note functionality. The vulnerability arises from insufficient sanitization and encoding of input fields, allowing authenticated users to inject JavaScript code that executes in other users' browsers when viewing affected records. This can alter displayed content and perform actions within the victim's session context. Exploitation requires authenticated access.